The threat actor claims to have leaked data allegedly belonging to Win Empresas, a Peruvian internet and cybersecurity service provider. According to the post, the leaked dataset includes ticket records, support tickets, client information, client locations, network node information, service types, Tax ID (RUC), and labor/material cost amounts.